12126 Commits

Author SHA1 Message Date
djm@openbsd.org
7be4ac8136 upstream: restore blocking status on stdio fds before close
ssh(1) needs to set file descriptors to non-blocking mode to operate
but it was not restoring the original state on exit. This could cause
problems with fds shared with other programs via the shell, e.g.

> $ cat > test.sh << _EOF
> #!/bin/sh
> {
>         ssh -Fnone -oLogLevel=verbose ::1 hostname
>         cat /usr/share/dict/words
> } | sleep 10
> _EOF
> $ ./test.sh
> Authenticated to ::1 ([::1]:22).
> Transferred: sent 2352, received 2928 bytes, in 0.1 seconds
> Bytes per second: sent 44338.9, received 55197.4
> cat: stdout: Resource temporarily unavailable

This restores the blocking status for fds 0,1,2 (stdio) before ssh(1)
abandons/closes them.

This was reported as bz3280 and GHPR246; ok dtucker@

OpenBSD-Commit-ID: 8cc67346f05aa85a598bddf2383fcfcc3aae61ce
2021-05-19 11:52:14 +10:00
djm@openbsd.org
c4902e1a65 upstream: fix breakage of -W forwaring introduced in 1.554; reported by
naddy@ and sthen@, ok sthen@

OpenBSD-Commit-ID: f72558e643a26dc4150cff6e5097b5502f6c85fd
2021-05-18 11:02:32 +10:00
dtucker@openbsd.org
afea01381a upstream: Regenerate moduli.
OpenBSD-Commit-ID: 83c93a2a07c584c347ac6114d6329b18ce515557
2021-05-17 19:25:00 +10:00
Damien Miller
be2866d620 Handle Android libc returning NULL pw->pw_passwd
Reported by Luke Dashjr
2021-05-17 09:41:46 +10:00
bagajjal
46688b7bc0 Do not advertise fstatvfs 2021-05-14 11:46:28 -07:00
djm@openbsd.org
5953c14300 upstream: fix previous: test saved no_shell_flag, not the one that just
got clobbered

OpenBSD-Commit-ID: b8deace085d9d941b2d02f810243b9c302e5355d
2021-05-14 17:20:35 +10:00
djm@openbsd.org
1e9fa55f4d upstream: Fix ssh started with ControlPersist incorrectly executing a
shell when the -N (no shell) option was specified. bz3290 reported by Richard
Schwab; patch from markus@ ok me

OpenBSD-Commit-ID: ea1ea4af16a95687302f7690bdbe36a6aabf87e1
2021-05-14 13:10:50 +10:00
dtucker@openbsd.org
d1320c492f upstream: Clarify language about moduli. While both ends of the
connection do need to use the same parameters (ie groups), the DH-GEX
protocol takes care of that and both ends do not need the same contents in
the moduli file, which is what the previous text suggested.  ok djm@ jmc@

OpenBSD-Commit-ID: f0c18cc8e79c2fbf537a432a9070ed94e96a622a
2021-05-14 08:14:41 +10:00
bagajjal
4d2ea7f2f2 fix the error message when user tries to login with just domain name 2021-05-12 14:09:30 -07:00
bagajjal
1abee49b13 remove unnecessary logs 2021-05-12 11:18:10 -07:00
djm@openbsd.org
d3cc4d650c upstream: include pid in LogVerbose spam
OpenBSD-Commit-ID: aacb86f96ee90c7cb84ec27452374285f89a7f00
2021-05-10 10:58:11 +10:00
djm@openbsd.org
e3c032333b upstream: don't sigdie() in signal handler in privsep child process;
this can end up causing sandbox violations per bz3286; ok dtucker@

OpenBSD-Commit-ID: a7f40b2141dca4287920da68ede812bff7ccfdda
2021-05-10 10:57:58 +10:00
bagajjal
de3b30217c crank OpenSSH v8.6 2021-05-07 16:34:30 -07:00
bagajjal
085c1d232e Change zlib version from 2.1.11 to 1.2.11 2021-05-07 10:35:27 -07:00
bagajjal
48aee09043
update to Libressl V3.3.3.0 (#508) 2021-05-07 10:12:57 -07:00
dtucker@openbsd.org
a4039724a3 upstream: Increase ConnectionAttempts from 4 to 10 as the tests
occasionally time out on heavily loaded hosts.

OpenBSD-Regress-ID: 29a8cdef354fc9da471a301f7f65184770434f3a
2021-05-07 19:42:35 +10:00
djm@openbsd.org
c0d7e36e97 upstream: dump out a usable private key string too; inspired by Tyson
Whitehead

OpenBSD-Regress-ID: 65572d5333801cb2f650ebc778cbdc955e372058
2021-05-07 12:36:24 +10:00
djm@openbsd.org
24fee8973a upstream: correct mistake in spec - the private key blobs are encoded
verbatim and not as strings (i.e. no 4-byte length header)

OpenBSD-Commit-ID: 3606b5d443d72118c5b76c4af6dd87a5d5a4f837
2021-05-07 12:36:18 +10:00
Oldřich Jedlička
62ea86fdbe
Rework username same as hostname (#469) 2021-05-06 15:20:35 -07:00
dtucker@openbsd.org
f43859159c upstream: Don't pass NULL as a string in debugging as it does not work
on some platforms in -portable.  ok djm@

OpenBSD-Commit-ID: 937c892c99aa3c9c272a8ed78fa7c2aba3a44fc9
2021-05-05 10:08:43 +10:00
bagajjal
59a96cfee4
Update _PATH_TTY to point to the console (#506) 2021-05-04 13:18:06 -07:00
Rafael Rivera
4c37fb9792
Quote XAuthLocation before use (#442) 2021-05-03 18:26:47 -07:00
Melby Ruarus
747d7ee66c
Updates the Win32 error translation table to translate ERROR_NOT_SUPPORTED to EOPNOTSUPP. (#440) 2021-05-03 12:45:19 -07:00
Semicolon
5e5ed64743
user permission fix to include ecdsa and ed25519 (#446)
Co-authored-by: Michael Trigg <mtrigg@crabel.com>
2021-05-03 12:40:10 -07:00
Rafael Rivera
7e53747509
Fallback onto TEMP if TMPDIR undefined (#441) 2021-05-03 12:31:52 -07:00
bagajjal
507b4e52be
fix session id mismatch (#505) 2021-05-03 12:31:24 -07:00
djm@openbsd.org
ac31aa3c63 upstream: more debugging for UpdateHostKeys signature failures
OpenBSD-Commit-ID: 1ee95f03875e1725df15d5e4bea3e73493d57d36
2021-05-03 11:05:31 +10:00
Darren Tucker
8e32e97e78 Add obsd69 test target. 2021-05-01 20:07:47 +10:00
djm@openbsd.org
f068930635 upstream: a little debugging in the main mux process for status
confirmation failures in multiplexed sessions

OpenBSD-Commit-ID: 6e27b87c95176107597035424e1439c3232bcb49
2021-04-30 14:32:18 +10:00
dtucker@openbsd.org
e65cf00da6 upstream: Remove now-unused skey function prototypes leftover from
skey removal.

OpenBSD-Commit-ID: 2fc36d519fd37c6f10ce74854c628561555a94c3
2021-04-30 14:32:18 +10:00
bagajjal
349e834a04 remove spaces in appveyor.yml to trigger CI build 2021-04-29 18:16:29 -07:00
bagajjal
279abce5ef Add appveyor debug logs 2021-04-29 17:09:46 -07:00
bagajjal
88c5e11dbd Merge branch 'latestw_all' of https://github.com/PowerShell/openssh-portable into bagajjal/pull_v8_6 2021-04-29 12:51:13 -07:00
bagajjal
9dba3f91e4
Bagajjal/compile test v8.6 (#503)
Fixed compilation and test failures with V8.6.
2021-04-29 12:41:08 -07:00
Darren Tucker
ae5f9b0d5c Wrap sntrup761x25519 inside ifdef.
From balu.gajjala at gmail.com via bz#3306.
2021-04-29 13:01:50 +10:00
Darren Tucker
70a8dc138a Add status badges for Actions-based tests. 2021-04-29 10:59:54 +10:00
vthiebaut10
83927cbe02
sftp-server running on windows writes incoming file from linux client… (#502) 2021-04-28 14:56:51 -07:00
Darren Tucker
40b59024cc Add obsdsnap (OpenBSD snapshot) test target. 2021-04-28 12:22:11 +10:00
Darren Tucker
e627067ec8 Add test building upstream OpenBSD source. 2021-04-28 11:43:54 +10:00
Darren Tucker
1b8108ebd1 Test against OpenSSL 1.1.0h instead of 1.1.0g.
1.1.0g requires a perl glob module that's not installed by default.
2021-04-27 14:22:20 +10:00
Darren Tucker
9bc20efd39 Use the default VM type for libcrypto ver tests. 2021-04-27 12:37:59 +10:00
Darren Tucker
9f79e80dc4 Always build OpenSSL shared.
This is the default for current versions but we need it to test against
earlier versions.
2021-04-27 12:32:46 +10:00
Darren Tucker
b3cc9fbdff Fix custom OpenSSL tests.
Check out specified OpenSSL version.  Install custom libcrypto where
configure expects to find it.  Remove unneeded OpenSSL config time
options.  Older OpenSSL versions were not make -j safe so remove it.
2021-04-27 11:44:29 +10:00
Darren Tucker
7753260987 Export CC and CFLAGS for c89 test. 2021-04-26 17:20:23 +10:00
Darren Tucker
33f62dfbe8 Add c89 here too. 2021-04-26 17:13:44 +10:00
Darren Tucker
da9d59f526 Add test against OpenSSL w/out ECC. 2021-04-26 15:34:23 +10:00
Darren Tucker
29e194a752 Ensure we can still build with C89. 2021-04-26 14:50:58 +10:00
Darren Tucker
a38016d369 Interop test agains PuTTY. 2021-04-26 14:50:58 +10:00
Darren Tucker
095b0307a7 Support testing against arbitary libcrytpo vers.
Add tests against various LibreSSL and OpenSSL versions.
2021-04-26 14:50:44 +10:00
Darren Tucker
b16082aa11 Add fbsd10 test target. 2021-04-26 13:35:44 +10:00